$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856387e4-e5ae-315d-9de8-d0d7211acdb2.roa File: 856387e4-e5ae-315d-9de8-d0d7211acdb2.roa (raw, json) Hash identifier: qgChcEP2CsF2AOT/MVmj5SlxD693evAZN74rU0NFg+s= Subject key identifier: A1:3F:48:2D:F4:3E:74:4B:24:D4:28:99:0F:94:C2:14:82:3A:99:E6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AD9366A10F5D0C05AA1671EC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856387e4-e5ae-315d-9de8-d0d7211acdb2.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 396567 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:6a:10:f5:d0:c0:5a:a1:67:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=0381529d-c0f4-4dc9-8941-c4a380e2e338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6d:f3:9c:f8:4b:14:69:26:16:2f:9e:e1:7a: 77:c3:90:0a:1e:fe:cb:72:b9:44:7c:0c:12:03:9d: 0f:66:51:08:93:02:f0:f7:c4:4c:6b:40:79:8b:ea: 92:96:68:4a:44:83:62:cd:13:01:84:24:30:01:d8: 96:ff:df:c9:b3:74:61:e1:07:0c:4e:6c:14:ef:93: 37:f1:05:b7:3e:35:c0:bf:1b:0e:ce:67:0f:7b:8c: 18:89:e6:11:4e:f5:51:bd:ab:05:c6:c9:50:c1:50: ea:92:a1:6c:fe:8c:c2:86:f3:63:4b:1b:44:d6:1a: 1b:34:26:24:e7:a8:c1:af:11:d9:7f:f6:52:58:16: f8:10:24:7c:0a:0e:a9:3c:d2:75:01:4c:e7:8e:e5: d0:f7:b4:85:00:28:ac:3b:e6:1e:42:21:73:47:b9: 86:ae:83:11:c3:10:d5:29:1b:c1:ac:98:0e:cd:6c: 5e:b3:3a:d3:8e:b9:e9:af:9d:86:38:73:96:ea:72: f1:ff:1d:26:63:91:83:c6:0b:49:06:3b:09:d0:84: 4b:ec:af:3d:5f:73:4f:a0:a5:3e:4c:76:98:ac:da: 8b:50:62:4d:95:91:73:fd:ca:0f:7c:11:32:1d:99: dd:51:85:97:24:b4:97:91:64:28:20:04:e2:21:1b: eb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3F:48:2D:F4:3E:74:4B:24:D4:28:99:0F:94:C2:14:82:3A:99:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856387e4-e5ae-315d-9de8-d0d7211acdb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:da:aa:51:7e:96:7a:bf:17:75:c3:21:eb:4e:2d:3b:dc:fa: 65:cf:35:f9:46:cd:37:ec:df:74:cc:db:90:23:3d:3b:ac:bd: 0d:76:ff:af:3c:a3:23:7b:29:fe:c9:5b:6c:d4:13:18:52:fa: 5e:b5:39:57:69:f1:0a:78:71:e4:41:26:6c:2b:20:b4:6a:1a: 7d:c2:e6:2a:50:3f:67:b4:fc:9c:bf:62:5f:13:80:5e:53:e5: 84:4f:eb:55:bb:e5:78:df:41:c8:fb:9f:4e:46:b9:7e:ee:92: 56:dc:dc:c4:f0:ac:df:f9:45:c1:86:1c:74:0a:b5:c5:7a:bf: b1:3a:72:76:51:f3:0b:21:a7:af:02:61:96:e8:79:92:c4:48: 46:92:1c:11:9a:02:54:22:ca:72:c7:13:b3:13:18:2c:18:67: 1c:42:0e:e9:6d:e8:ca:18:72:5f:0e:6f:e6:b1:01:d1:36:3f: 5b:59:73:b4:cd:9d:15:e2:cc:4c:4b:14:2f:0a:c2:f2:9f:d4: 46:f7:8d:f8:18:62:ae:e8:82:8b:a6:db:7d:f7:9c:b4:9c:94: 9b:15:4d:a5:b7:fb:72:9e:33:a9:83:d4:0d:c3:91:77:d1:b5: 01:f2:e7:45:72:cf:46:78:2a:34:86:3e:06:df:2d:98:1e:a4: 0d:58:82:fc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErZNmoQ9dDAWqFnHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MDM4MTUyOWQtYzBmNC00ZGM5LTg5NDEtYzRhMzgwZTJlMzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG3znPhLFGkmFi+e4Xp3w5AKHv7LcrlEfAwS A50PZlEIkwLw98RMa0B5i+qSlmhKRINizRMBhCQwAdiW/9/Js3Rh4QcMTmwU75M3 8QW3PjXAvxsOzmcPe4wYieYRTvVRvasFxslQwVDqkqFs/ozChvNjSxtE1hobNCYk 56jBrxHZf/ZSWBb4ECR8Cg6pPNJ1AUznjuXQ97SFACisO+YeQiFzR7mGroMRwxDV KRvBrJgOzWxeszrTjrnpr52GOHOW6nLx/x0mY5GDxgtJBjsJ0IRL7K89X3NPoKU+ THaYrNqLUGJNlZFz/coPfBEyHZndUYWXJLSXkWQoIATiIRvrgQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKE/SC30PnRLJNQomQ+UwhSCOpnmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU2Mzg3ZTQtZTVhZS0z MTVkLTlkZTgtZDBkNzIxMWFjZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCG2qpRfpZ6vxd1wyHrTi073PplzzX5Rs037N90 zNuQIz07rL0Ndv+vPKMjeyn+yVts1BMYUvpetTlXafEKeHHkQSZsKyC0ahp9wuYq UD9ntPycv2JfE4BeU+WET+tVu+V430HI+59ORrl+7pJW3NzE8Kzf+UXBhhx0CrXF er+xOnJ2UfMLIaevAmGW6HmSxEhGkhwRmgJUIspyxxOzExgsGGccQg7pbejKGHJf Dm/msQHRNj9bWXO0zZ0V4sxMSxQvCsLyn9RG9434GGKu6IKLptt995y0nJSbFU2l t/tynjOpg9QNw5F30bUB8udFcs9GeCo0hj4G3y2YHqQNWIL8 -----END CERTIFICATE-----Generated at Sat Aug 23 14:57:52 2025 by rpki-client